CVEvulnerability
CVE-2015-6845
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-10-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
EMC SourceOne Email Supervisor before 7.2 does not properly employ random values for session IDs, which makes it easier for remote attackers to obtain access by guessing an ID.
Affected configurations
• emc sourceone email supervisor (<= 7.1)
References
- http://packetstormsecurity.com/files/133922/EMC-SourceOne-Email-Supervisor-XSS-Session-Hijacking.html Third Party Advisory
- http://seclists.org/bugtraq/2015/Oct/58 Mailing List
- http://www.securitytracker.com/id/1033787 Third Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/133922/EMC-SourceOne-Email-Supervisor-XSS-Session-Hijacking.html Third Party Advisory
- http://seclists.org/bugtraq/2015/Oct/58 Mailing List
- http://www.securitytracker.com/id/1033787 Third Party Advisory, VDB Entry